Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fb7be366-0a78-3637-b6c2-dfbe61f2d9a7.roa
File: fb7be366-0a78-3637-b6c2-dfbe61f2d9a7.roa (raw, json)
Hash identifier: ImwoWMzKnKY2QBbWV+ktY5yxgHcTAVNtjSwWL8OMh3w=
Subject key identifier: 48:6B:F8:E7:B6:07:5D:D6:B3:D4:BF:44:0F:D6:33:1A:1A:83:61:E1
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285846F5F5944628785B9026E2A5C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fb7be366-0a78-3637-b6c2-dfbe61f2d9a7.roa
Signing time: Thu 22 Aug 2024 13:00:40 +0000
ROA not before: Thu 22 Aug 2024 13:00:40 +0000
ROA not after: Wed 20 Nov 2024 14:00:40 +0000
asID: 64286
IP address blocks: 64.64.115.0/24 maxlen: 24
64.64.118.0/24 maxlen: 24
64.64.127.0/24 maxlen: 24
98.159.38.0/24 maxlen: 24
98.159.45.0/24 maxlen: 24
98.159.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f5:f5:94:46:28:78:5b:90:26:e2:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Aug 22 13:00:40 2024 GMT
Not After : Nov 20 14:00:40 2024 GMT
Subject: CN=1a58b276-f19f-4d9b-8c25-617da8d85926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:7f:e8:d0:82:e5:2d:0e:5b:5a:64:cf:41:
2c:b4:3f:88:a8:3e:7d:8d:35:5e:ea:ee:54:cb:65:
1e:98:fd:c6:27:c2:8f:21:9e:e5:a8:06:2b:1e:e9:
23:55:da:7c:8c:cd:0e:7e:65:02:8b:77:dc:fb:a9:
6b:95:60:2b:f3:2f:c2:14:bc:d1:25:7b:1e:a7:5c:
e5:e0:fb:66:cc:fd:1f:97:98:5a:16:5d:47:c1:d8:
8e:c7:14:e2:f6:8f:c8:dd:5c:b4:c5:57:55:73:56:
95:bd:21:1c:da:7e:a9:54:51:95:25:46:f5:57:45:
63:16:d9:cd:b8:a6:a8:39:45:1f:06:de:41:4c:a7:
c8:a8:83:5d:ec:4c:45:0f:4f:55:0f:38:d6:26:3a:
75:f5:54:86:b8:53:81:39:ef:d9:47:78:d6:58:7b:
07:7c:01:0c:63:53:29:18:b2:9b:c7:6f:c0:84:1c:
c4:a5:67:28:17:0f:63:74:f5:9c:a2:05:fc:3d:e3:
3c:ad:1a:ff:8e:49:e1:c3:58:cc:f3:7e:a2:8c:f0:
c1:b5:0d:c3:a1:8f:5f:65:84:9e:af:de:6f:49:a2:
a4:7c:77:02:8d:0e:55:61:14:1d:18:40:a0:7b:0a:
56:15:a6:7d:e2:04:02:a3:97:2b:54:12:6f:fb:a1:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:F8:E7:B6:07:5D:D6:B3:D4:BF:44:0F:D6:33:1A:1A:83:61:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fb7be366-0a78-3637-b6c2-dfbe61f2d9a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.115.0/24
64.64.118.0/24
64.64.127.0/24
98.159.38.0/24
98.159.45.0/24
98.159.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:cb:b6:26:2a:8b:37:40:39:a3:f0:c3:79:1e:1e:82:9f:09:
0f:1c:24:c3:bf:93:a9:dc:b4:0e:04:97:62:4a:39:6a:59:46:
89:ec:a3:62:2a:6c:09:e7:4c:2c:af:5f:78:d0:65:66:80:5a:
a4:df:2f:12:89:b6:b5:67:d8:57:4a:72:a3:8d:f9:e9:c8:e0:
d9:2d:e9:0c:83:30:e6:f3:82:1b:bd:84:e0:af:56:89:de:f6:
ee:3f:b1:da:56:15:d7:4b:01:45:79:ad:95:13:f1:58:ea:fd:
08:4b:16:be:cf:26:bb:d8:16:10:d6:99:20:7b:3f:bf:3a:d0:
29:27:24:f4:8d:20:4a:b8:0c:17:93:00:35:08:0a:f3:b4:4c:
24:dc:f6:c8:50:80:a0:fe:1c:75:2a:f2:38:71:8d:b9:21:d2:
d3:f7:e8:3e:d6:4d:eb:04:b9:c0:2a:87:27:85:ab:d4:8a:6b:
ed:ad:38:f7:53:41:3f:a5:d7:a6:22:f9:3c:29:14:9b:1a:ed:
bb:04:05:25:86:fe:64:13:e4:2a:66:b7:f5:6a:99:be:fd:fd:
79:b4:3a:88:7a:80:7c:7e:93:7b:94:3c:38:c4:09:4a:f1:64:
e8:64:8e:70:a0:18:59:22:0b:e3:41:6d:a3:57:21:0b:6c:ba:
ed:4e:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:13 2025 by rpki-client